Stack Exhaustion Vulnerability in HAProxy by HAProxy Technologies
CVE-2018-20103

7.5HIGH

Key Information:

Vendor: Haproxy
Status: Haproxy
Vendor: CVE Published:; 12 December 2018

What is CVE-2018-20103?

A vulnerability exists in the dns.c component of HAProxy that can lead to stack exhaustion due to improper handling of compressed pointers. An attacker may exploit this issue by sending crafted packets that cause infinite recursion or generate a long chain of valid pointers. This results in resource exhaustion and can compromise the stability of the HAProxy service, potentially leading to denial of service.